MySQL and FreeRADIUS environment
Hi everybody, In my company we are thinking to implement a FreeRADIUS server with MySQL on Linux. We need to duplicate FreeRADIUS service because we think that this is a critical service for us but the authentication process only could be done with the master server(FreeRADIUS and MySQL service, both in only one server). For the other hand, if we want to replicate the data base servers, we would have to synchronize two database servers but we would not know wich would be the best solution, cluster or synchronize. Maybe we will not to need a MySQL cluster service and we will need two servers only. First with master FreeRADIUS service and master MySQL service and the second with slave FreeRADIUS service and slave MySQL service. What do you think about the best solution to implement this environment? I hope your answer. Thank you very much. Regards, -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Tue, Sep 27, 2011 at 11:32 PM, tonimanel <antoniofernandez@fabergames.com> wrote:
Hi everybody,
In my company we are thinking to implement a FreeRADIUS server with MySQL on Linux. We need to duplicate FreeRADIUS service because we think that this is a critical service for us but the authentication process only could be done with the master server(FreeRADIUS and MySQL service, both in only one server). For the other hand, if we want to replicate the data base servers, we would have to synchronize two database servers but we would not know wich would be the best solution, cluster or synchronize. Maybe we will not to need a MySQL cluster service and we will need two servers only. First with master FreeRADIUS service and master MySQL service and the second with slave FreeRADIUS service and slave MySQL service.
What do you think about the best solution to implement this environment?
Hire someone who have implement a similar setup. There are many possible configuration with varying degrees of cost and complexity, depending on how much you can tolerate a single point of failure. The easiest way would be to have two or more servers running FR with one mysql master and many mysql slaves (FR and mysql can use the same server), with distributed sql reads (i.e. SELECT) and writes only to the master. In the event of failure, you need to manually (for maximum consistency) promote one slave to be master. The most complex way would be to setup a full mysql cluster, possibly with each server acting as FR, data node, and sql node. -- Fajar
Hi, thank you for your answer. We are thinking in two servers: First server with one freeradius and mysql service, both services as actives. Second server, another freeradius service with mysql service running also. Two servers must to have data replicated. I think that this is the best solution for my company, it's possible with mysql and freeradius in Debian? Thanks -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Fri, Sep 30, 2011 at 9:19 PM, tonimanel <antoniofernandez@fabergames.com> wrote:
Hi, thank you for your answer.
We are thinking in two servers: First server with one freeradius and mysql service, both services as actives. Second server, another freeradius service with mysql service running also. Two servers must to have data replicated.
Like I said, eaerlier there are many possible configuration with varying degrees of cost and complexity, depending on how much you can tolerate a single point of failure. If you have a somewhat experienced MySQL admin you could create a master-master replication. It's not really a cluster, but should be enough for simple purposes: http://www.google.co.id/search?q=mysql+master+master+replication On the other hand, if you have more experience in freeradius, you could create two independent instances and have FR replicate accounting data to each other (or have each FR instance write to two db, possibly with buffered sql) to maintain sync. In this setup the user data needs to be synced manually though.
I think that this is the best solution for my company, it's possible with mysql and freeradius in Debian?
It's not really a matter of which distro, but rather expertise. If you use a distro with recent-enough version of freeradius, or willing to compile from source, it should work. -- Fajar
Hi again, I have a doubt, what happen if in my company we want to have two servers, both with freeradius service and mysql service and this two servers could be actives with mysql data replicated? We would like to have two servers as actives with the ability to be both functional. I think that is more difficult than the other solution but this is best. Is possible to make the data replica with TCP protocol with FreeRADIUS? Do you prefer FreeRADIUS replica or mysql replica? What is the best solution to make the replica? Thank you very much!!! I hope your answers!! -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
tonimanel wrote:
Is possible to make the data replica with TCP protocol with FreeRADIUS? Do you prefer FreeRADIUS replica or mysql replica? What is the best solution to make the replica?
The best solution is to use RADIUS replication. FreeRADIUS knows how to do conflict resolution in the database. MySQL does not. See "raddb/radrelay.conf", and the detail file readers for examples. Also, raddb/sites-available/copy-acct-to-home-server Alan DeKok.
Hi again, How can I do freeradius replication with radrelay? Do you know any tutorial or howto? I have a basic freeradius service installed and function!!! Thanks! -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
My FreeRADIU version is 2.1.10 on Debian. Suggest me update? Or is a valid verstion to work and implement freeradius replication with radrelay? Thanks, -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On Wed, Oct 5, 2011 at 4:57 PM, tonimanel <antoniofernandez@fabergames.com> wrote:
Hi again,
How can I do freeradius replication with radrelay? Do you know any tutorial or howto?
Have you READ the suggested documentation? For example, Alan said "Also, raddb/sites-available/copy-acct-to-home-server" I also wrote earlier rerarding FR-managed replication: "In this setup the user data needs to be synced manually though." -- Fajar
I'm going to read this example file. I don't know if I will understand it but I will try it. Thanks, -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
I have readed the example file. I have some doubts. Do I get with this example file? I don't have a radrelay.conf example (or is this?) ... I have readed in Internet that in radiusd.conf I should to define a detail block information like detail detail-name {some information} to get two binary files with my main server data (then the other server should to use to replicate data), it is true? And then I should create radrelay.conf file (because not exists in /etc/freeradius) with what information? I think that with listen block of copy-acct-to-home-server file, it is true? Then, when I have got radrelay.conf file with listen block information from "copy-acct-to-home-server" file, where I should to define the second server? I think that in some place I should to define the second server for make the replica... Can you help me? Can you tell me about that? Thank you. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
tonimanel wrote:
I have readed the example file. I have some doubts.
Do I get with this example file? I don't have a radrelay.conf example (or is this?)
Yes, you do. See the raddb/ directory.
... I have readed in Internet that in radiusd.conf I should to define a detail block information like detail detail-name {some information} to get two binary files with my main server data (then the other server should to use to replicate data), it is true?
You could try reading the examples that come with the server. The examples you were told to read. Why search the internet when you have the answers in front of you?
And then I should create radrelay.conf file (because not exists in /etc/freeradius) with what information? I think that with listen block of copy-acct-to-home-server file, it is true?
The server comes with a sample radrelay.conf. See the "tar" file on the web site. Alan DeKok.
I have readed the "sites-available/example" file that contains an example of how to define a client and a server. I should to define a client and a server in both machines (serverA's client is server B AND serverB's client is server A). Do you understand me? Thanks again. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
tonimanel wrote:
I have readed the "sites-available/example" file that contains an example of how to define a client and a server.
i.e. you didn't do what you were told to do.
I should to define a client and a server in both machines (serverA's client is server B AND serverB's client is server A). Do you understand me?
I have no idea. Alan DeKok.
Sorry, can you tell me where are "detail file readers for examples"? Thank you for your help. We apologize for any inconvenience caused -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On 6 Oct 2011, at 09:59, tonimanel wrote:
Sorry, can you tell me where are "detail file readers for examples"?
Thank you for your help. We apologize for any inconvenience caused
raddb/sites-available/buffered-sql -Arran Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
Sorry did not mean to cause this series of comments to me. I just found something missing, I think, by the discrepancy between files with respect to the installation I have done and what you say here. Once again I apologize. Thanks. -- View this message in context: http://freeradius.1045715.n5.nabble.com/MySQL-and-FreeRADIUS-environment-tp4... Sent from the FreeRadius - User mailing list archive at Nabble.com.
On 6 Oct 2011, at 10:19, Alan DeKok wrote:
Arran Cudbard-Bell wrote:
raddb/sites-available/buffered-sql
He's already been told MULTIPLE times where to look.
I can only conclude he's lazy, or he's trying to be rude.
Ah, was in auto-help mode. Blame it on the iGrief. Arran Cudbard-Bell a.cudbardb@freeradius.org Betelwiki, Betelwiki, Betelwiki.... http://wiki.freeradius.org/ !
participants (4)
-
Alan DeKok -
Arran Cudbard-Bell -
Fajar A. Nugraha -
tonimanel